VDB
RHSA-2024%3A4955
RHSA-2024%3A4955
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure in OpenSSH 9.5 against keystroke timing attacks.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-machine-config-operator@sha256:f5e9c1ef2d7417d6c5aef230e0f79351b3a5cb6e5376ccc665c57ceef3b694e7_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-config-operator@sha256:f5e9c1ef2d7417d6c5aef230e0f79351b3a5cb6e5376ccc665c57ceef3b694e7_arm64, openshift4/ose-machine-config-operator@sha256:f5e9c1ef2d7417d6c5aef230e0f79351b3a5cb6e5376ccc665c57ceef3b694e7_arm64 |
| Red Hat | openshift4/ose-machine-api-rhel9-operator@sha256:c77dacbd8bf20dc7f873c1add4943c86afb4d9a12d0c9fc6995220b03d4409d8_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-rhel9-operator@sha256:c77dacbd8bf20dc7f873c1add4943c86afb4d9a12d0c9fc6995220b03d4409d8_s390x, openshift4/ose-machine-api-rhel9-operator@sha256:c77dacbd8bf20dc7f873c1add4943c86afb4d9a12d0c9fc6995220b03d4409d8_s390x |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:ec16c929dfc350d8ece12627d96d8af21e8680f6e2bad7fc15283fc6b0582862_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-os-images-rhel8@sha256:ec16c929dfc350d8ece12627d96d8af21e8680f6e2bad7fc15283fc6b0582862_amd64, openshift4/ose-machine-os-images-rhel8@sha256:ec16c929dfc350d8ece12627d96d8af21e8680f6e2bad7fc15283fc6b0582862_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:e7e90986879084f7005aa7772142ec86ea509e819575c9576ca47974034245d7_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ovn-kubernetes-rhel9@sha256:e7e90986879084f7005aa7772142ec86ea509e819575c9576ca47974034245d7_amd64, openshift4/ose-ovn-kubernetes-rhel9@sha256:e7e90986879084f7005aa7772142ec86ea509e819575c9576ca47974034245d7_amd64 |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:406d65a057b1b6f0b05e690c4655055449359a3b8d64e3c8072113cfa00d4445_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/driver-toolkit-rhel9@sha256:406d65a057b1b6f0b05e690c4655055449359a3b8d64e3c8072113cfa00d4445_amd64, * |
| Red Hat | openshift4/ose-tests@sha256:3f82d4444c385bb91b7735d638cf9e1adf17bd745026cba33f5d28701b9a531c_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-tests@sha256:3f82d4444c385bb91b7735d638cf9e1adf17bd745026cba33f5d28701b9a531c_arm64 |
| Red Hat | rhcos@sha256:f45f6d1596c25672f1e6b4f8993be724c57298f2f2503c4e3429a906e540b69b_x86_64 as a component of Red Hat OpenShift Container Platform 4.15 | rhcos@sha256:f45f6d1596c25672f1e6b4f8993be724c57298f2f2503c4e3429a906e540b69b_x86_64, * |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:547b7bf7a5f479b60865282763062dec68a9a010c49484078ea4a15982cd74a4_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:547b7bf7a5f479b60865282763062dec68a9a010c49484078ea4a15982cd74a4_ppc64le |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:81b6e1260ec896ce9296a172aad4c7b1c4f3243b425f90766fb0e0a448e5c081_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/egress-router-cni-rhel8@sha256:81b6e1260ec896ce9296a172aad4c7b1c4f3243b425f90766fb0e0a448e5c081_amd64 |
| Red Hat | openshift4/ose-cluster-network-rhel9-operator@sha256:97db881ae4d522ad45c104f107a7553528484b70dfe8d0a828518cd40d6014af_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-network-rhel9-operator@sha256:97db881ae4d522ad45c104f107a7553528484b70dfe8d0a828518cd40d6014af_arm64, openshift4/ose-cluster-network-rhel9-operator@sha256:97db881ae4d522ad45c104f107a7553528484b70dfe8d0a828518cd40d6014af_arm64 |
| Red Hat | openshift4/ose-installer-altinfra-rhel8@sha256:27d6667c826d2733dd8c1cf81935952236cbb11785a7e6551e375fcc5a329327_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-altinfra-rhel8@sha256:27d6667c826d2733dd8c1cf81935952236cbb11785a7e6551e375fcc5a329327_arm64 |
| Red Hat | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:c6a6493c7dd5b2d8cb6937789b9c8789d8a4bac5bdb6f683ba35293d04437596_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:c6a6493c7dd5b2d8cb6937789b9c8789d8a4bac5bdb6f683ba35293d04437596_amd64 |
| Red Hat | rhcos@sha256:f45f6d1596c25672f1e6b4f8993be724c57298f2f2503c4e3429a906e540b69b_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | rhcos@sha256:f45f6d1596c25672f1e6b4f8993be724c57298f2f2503c4e3429a906e540b69b_ppc64le, rhcos@sha256:f45f6d1596c25672f1e6b4f8993be724c57298f2f2503c4e3429a906e540b69b_ppc64le |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:479df6cbd0c119c7a408299a2b788b9913b1b447699abbd38dfc4c7bb5708bfc_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-baremetal-installer-rhel8@sha256:479df6cbd0c119c7a408299a2b788b9913b1b447699abbd38dfc4c7bb5708bfc_ppc64le |
| Red Hat | openshift4/ose-installer-altinfra-rhel8@sha256:035b598a5e950763f2222418d1fea194fcea0708c4f51c43384f8092add4e247_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-ironic-rhel9@sha256:b347de35353a413c78e22f611150e7e31b621fa0900ddef039a76ebf7e6f0fb4_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ironic-rhel9@sha256:b347de35353a413c78e22f611150e7e31b621fa0900ddef039a76ebf7e6f0fb4_arm64 |
| Red Hat | openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:db9abe848b6e5b8638e2ef30a064f0fb485d7395d97a83a3cf5639f6589e3be5_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:db9abe848b6e5b8638e2ef30a064f0fb485d7395d97a83a3cf5639f6589e3be5_s390x |
| Red Hat | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:1df515c5080d68ee0b6850c63ee13f63a4299d0f7d86ba6564942103fac80ff3_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:1df515c5080d68ee0b6850c63ee13f63a4299d0f7d86ba6564942103fac80ff3_arm64 |
| Red Hat | openshift4/ose-installer@sha256:17d97c4e74f97bcc2c427d8708ea5ad905ea3d24c6b694970fcca75e0ec35be4_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer@sha256:17d97c4e74f97bcc2c427d8708ea5ad905ea3d24c6b694970fcca75e0ec35be4_arm64 |
| Red Hat | openshift4/ose-installer-artifacts@sha256:2d767595b8c145fb420a2c6c6e45328048a170fb2006cb3b2d359175ce579d8f_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-artifacts@sha256:2d767595b8c145fb420a2c6c6e45328048a170fb2006cb3b2d359175ce579d8f_ppc64le, openshift4/ose-installer-artifacts@sha256:2d767595b8c145fb420a2c6c6e45328048a170fb2006cb3b2d359175ce579d8f_ppc64le |
…and 248 more
Timeline
- Aug 7, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 11, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:4955 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2254210 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2295085 issue
- https://issues.redhat.com/browse/OCPBUGS-35837 advisory
- https://issues.redhat.com/browse/OCPBUGS-36278 advisory
- https://issues.redhat.com/browse/OCPBUGS-36563 advisory
- https://issues.redhat.com/browse/OCPBUGS-36821 advisory
- https://issues.redhat.com/browse/OCPBUGS-36885 advisory
- https://issues.redhat.com/browse/OCPBUGS-37061 advisory
- https://issues.redhat.com/browse/OCPBUGS-37196 advisory
- https://issues.redhat.com/browse/OCPBUGS-37198 advisory
- https://issues.redhat.com/browse/OCPBUGS-37205 advisory
- https://issues.redhat.com/browse/OCPBUGS-37306 advisory
- https://issues.redhat.com/browse/OCPBUGS-37419 advisory
- https://issues.redhat.com/browse/OCPBUGS-37458 advisory
- https://issues.redhat.com/browse/OCPBUGS-37524 advisory
- https://issues.redhat.com/browse/OCPBUGS-37549 advisory
- https://issues.redhat.com/browse/OCPBUGS-37554 advisory
- https://issues.redhat.com/browse/OCPBUGS-37629 advisory
…and 11 more